您的ServiceAccount位于默认名称空间中，因此请按照以下说明修改 ClusterRoleBinding ，

Your ServiceAccount is in default namespace, so modify the ClusterRoleBinding like following,

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: journalbeat
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: journalbeat
subjects:
  - kind: ServiceAccount
    name: journalbeat
    namespace: default # as your ServiceAccount is in default namespace